fix tests. new product advisories enhancements

docs/legal/LICENSE-COMPATIBILITY.md

@@ -126,6 +126,41 @@ The following are considered **aggregation**, not derivation:
 
 **Rationale:** These components communicate via network protocols, APIs, or standard interfaces and are not linked into StellaOps binaries.
 
+### 3.5 Plugin Distribution (Community Plugin Grant)
+
+The Community Plugin Grant Addendum (`LICENSE-ADDENDUM-COMMUNITY-PLUGIN-GRANT.md`)
+provides additional terms for plugin development and distribution.
+
+**When distributing StellaOps Plugins:**
+
+```
+Plugin Distribution
++-- Plugin code (your license)
++-- Attribution to StellaOps
++-- If derivative work:
+    +-- LICENSE (BUSL-1.1)
+    +-- LICENSE-ADDENDUM-COMMUNITY-PLUGIN-GRANT.md
+    +-- NOTICE.md
+```
+
+**Requirements by Plugin Type:**
+
+| Plugin Type | License | Attribution | Include LICENSE | Include Addendum |
+|-------------|---------|-------------|-----------------|------------------|
+| API-only (no StellaOps code) | Your choice | Recommended | No | No |
+| Includes StellaOps code | BUSL-1.1 | Required | Yes | Yes |
+| Bundled with StellaOps | BUSL-1.1 | Required | Yes | Yes |
+| Competing managed service | Commercial | N/A | N/A | N/A |
+
+**Not Allowed Without Commercial License:**
+- Redistributing plugins as part of a competing managed service offering
+- White-labeling StellaOps functionality through plugins
+- Embedding plugins in multi-tenant SaaS offerings to third parties
+
+**See Also:**
+- `docs/legal/PLUGIN_DEVELOPER_FAQ.md` - Detailed plugin licensing FAQ
+- `docs/legal/SAAS_MSP_GUIDANCE.md` - SaaS and MSP hosting scenarios
+
 ---
 
 ## 4. Specific Dependency Analysis
@@ -289,8 +324,18 @@ Sample configuration files (`etc/*.yaml.sample`) are:
 - [Apache 2.0 FAQ](https://www.apache.org/foundation/license-faq.html)
 - [SPDX License List](https://spdx.org/licenses/)
 - [REUSE Best Practices](https://reuse.software/tutorial/)
+- [BUSL-1.1 License Text](https://spdx.org/licenses/BUSL-1.1.html)
+
+---
+
+## 9. Related Documents
+
+- `LICENSE-ADDENDUM-COMMUNITY-PLUGIN-GRANT.md` - Community Plugin Grant Addendum
+- `docs/legal/PLUGIN_DEVELOPER_FAQ.md` - Plugin developer FAQ
+- `docs/legal/SAAS_MSP_GUIDANCE.md` - SaaS and MSP guidance
+- `docs/legal/ENFORCEMENT_TELEMETRY_POLICY.md` - Audit and compliance policy
 
 ---
 
 *Document maintained by: Legal + Security Guild*
-*Last review: 2026-01-20*
+*Last review: 2026-01-25*